use users for the authenticate